Capture-Replay Vulnerability in Medtronic MiniMed Insulin Pumps

CVE-2018-14781

What is CVE-2018-14781?

The Medtronic MiniMed insulin pumps, when paired with a remote controller and configured with the optional 'easy bolus' and 'remote bolus' features enabled, are subject to a capture-replay attack. This vulnerability enables attackers to intercept and replay wireless communications between the pump and the remote controller, potentially resulting in unauthorized insulin delivery. Users of affected models should be aware of the risks associated with these settings and consider disabling features that could expose them to such threats.

References